The unexpected appearance of advertising banners on top of the desktop or in random applications is one of the most annoying problems faced by Android users. These intrusive notifications not only interfere with the comfortable use of the gadget, but may also indicate the presence of malware that consumes system resources and collects personal data. It is important to understand that the nature of the occurrence of such windows can be different: from subscriptions to spam notifications that you have allowed, to hidden mining viruses.
Many users mistakenly believe that the only way to solve the problem is to completely reset the settings or buy a new device. However, in most cases, it is enough to carry out proper diagnostics of the system, check installed applications and adjust browser settings. In this article, we will analyze in detail all the possible causes of pop-up advertising and provide step-by-step guide for eliminating them for different versions of the operating system.
Before taking radical measures, it is necessary to determine the source of the problem. Most often, the culprits are recently installed apps with a dubious reputation, sites on which you accidentally clicked the “Allow notifications” button, or outdated versions of system components. We will look at methods from simple settings to the use of specialized security utilities.
Diagnostics of the source of pop-up advertising
The first step in the fight against unwanted windows is to identify the specific application or process that generates them. Often, advertisements appear immediately after installing some free software, such as “memory optimizers,” “flashlights,” or “QR code scanners.” These apps may masquerade as useful utilities, but their real purpose is to display advertising content.
Pay attention to the behavior of your smartphone when the window appears. If ads pop up on top of all other apps, even when the screen is locked or you're on the home screen, this is a sure sign that a background service is running. Go to the section Settings → Applications → All applications and carefully study the list. Look for apps without an icon, with an empty name, or those that you did not install deliberately.
It is also worth checking the battery and traffic usage statistics. Malware often actively consumes battery power and mobile data, even in standby mode. If you find an app with abnormally high resource consumption that you rarely use, it is a strong candidate for removal. In some cases, the virus may be hidden under the name of a system process, so be attentive to the details.
⚠️ Attention: Do not remove system applications with names like “Android System”, “Google Play Services” or “System Shell”, even if they seem suspicious. This may result in the smartphone not working. Uninstall only those apps that you recognize as third-party.
For more accurate diagnostics, you can use Safe Boot mode. In this mode, only system applications are launched, which allows you to immediately understand whether third-party software is to blame. If the ads disappear in safe mode, then the problem is definitely in one of the applications you installed. To enter this mode, you usually need to hold down the power button, and then long press the “Turn off” item on the screen until the corresponding prompt appears.
Removing malicious applications and clearing the cache
Once you have identified a suspicious application, you must uninstall it immediately. The standard removal procedure through the settings can be blocked by malicious code that assumes device administrator rights. In this case, you must first revoke these rights. Go to the menu Settings → Security → Device Administrators and uncheck the suspicious application.
If the application is not uninstalled in the usual way or the “Delete” button is inactive, try clearing its data and cache before uninstalling. This often helps clear temporary blockages. Go to the application card, select the item Storage and press the buttons Clear cache and Clear data. Only after this, try to remove the app.
- 🗑️ Check the list of recent ones installations: Sort applications by installation date and delete everything that appeared before the problem started.
- 🔍 Look for duplicate applications: Viruses are often disguised as popular apps, changing one letter in the name or using a similar icon.
- 🛡️ Use an antivirus: If you cannot find the enemy manually, download a reliable anti-virus scanner from Google Play, for example, Dr.Web or Kaspersky.
In some cases, malware may be built into the system at the firmware level, especially if you bought the phone from unofficial sellers or installed custom builds. Then regular removal will not help. In such a situation, you may need to flash the device using official tools from the manufacturer, such as for Samsung or for MediaTek. administrator rights Odin for Samsung or SP Flash Tool for MediaTek.
☑️ Virus removal algorithm
Blocking pop-ups in the Chrome browser
Often the source of annoying windows is not a virus in the system, but the settings of the mobile browser. Users may accidentally allow sites to send notifications or show pop-ups, resulting in constant spam. The browser Google Chromethat is installed on most Android smartphones by default has built-in tools to combat this.
To block ads, open the browser and go to the settings menu. Find the section Site settings or Advanced settings. There are two key items you need to check here: “Pop-ups and redirects” and “Notifications”. Make sure that the switch opposite pop-ups is in the “Blocked” position.
Pay special attention to the list of allowed notifications. Often, users themselves consent to spam by clicking “Allow” on a website in order to access the content. In the Notifications section you will see a list of all sites that have the right to send you messages. Go through the list and remove all unfamiliar or suspicious domains by clicking on them and selecting the button Delete or Block.
chrome://settings/content/popupsYou can enter this command directly into Chrome browser's address bar to instantly jump to your pop-up settings. This is a quick way to check the current lock status without searching through the menu for a long time. It is also recommended to enable the "Safe Browsing" option, which warns about dangerous sites and prevents the downloading of malicious code.
If ads only appear when visiting certain sites, try installing an ad blocking extension, such as AdGuard, through the Kiwi or Yandex browser, since standard Chrome does not support extensions on Android.
Reset network settings and DNS filtering
Sometimes the problem lies not in the device itself, but in the network connections. Some Internet providers or public Wi-Fi networks may embed their own advertising in the traffic. In addition, malware can change your phone's DNS settings, redirecting requests to phishing servers that generate pop-ups.
An effective method of combating this is to use a private DNS with an ad blocking feature. Android settings since version 9 (Pie) have a built-in feature for this. Go to Settings → Connections → Other connection settings → Private DNS. Select the "DNS Provider Hostname" option and enter the trusted filter address.
| DNS Service | Host Address | Features |
|---|---|---|
| AdGuard DNS | dns.adguard.com |
Blocks ads and trackers |
| Cloudflare (No malware) | security.cloudflare-dns.com |
Protection against phishing and malware |
| Google DNS | dns.google |
Standard fast DNS without filtering |
After entering the address dns.adguard.com save the settings. Now all DNS traffic on your device will go through AdGuard servers, which automatically block requests to known advertising networks. This solution works at the system level and is effective for all applications that use standard network protocols, without requiring the installation of additional apps.
If using private DNS does not help, try resetting your network settings. This will return Wi-Fi, mobile data and Bluetooth settings to factory settings, removing possible malicious configurations. Please note that you will have to re-enter the passwords for the saved Wi-Fi networks.
What to do if DNS is not used?
If after saving the private DNS settings the Internet disappears or the settings are reset, your telecom operator may be blocking third-party DNS requests. In this case, try switching from mobile data to Wi-Fi or vice versa to check the filtering.
Disabling personal recommendations and system advertising
Not all pop-up windows are a sign of a virus. Smartphone manufacturers, especially brands from China such as Xiaomi, Meizu or Tecno, often embed advertising modules directly into the system shell. These windows may appear in application folders, in the boot menu, or when the screen is unlocked.
To remove such advertising, you need to disable the personal recommendations service. In the MIUI shell, this is done through the settings: log into your Mi account, go to the “Privacy” section and disable “Personal recommendations”. It is also worth going to each system application (Music, Themes, Security) and find the “Show ads” switch there to deactivate it.
For owners of pure Android or other shells, the process may differ, but the principle remains the same: look for items related to “Personalization”, “Recommendations” or “Marketing notifications”. Disabling these features makes the interface cleaner and increases system speed, as background loading of advertising content stops.
⚠️ Attention: Settings interfaces may vary depending on the version of Android and the model of your smartphone. If you do not find the exact item, use the settings search by entering the word “advertising” or “recommendations.”
Another source of system notifications may be pre-installed applications from Google or manufacturer partners. Go to the notification settings for each suspicious system application and disable the categories associated with “Tips”, “News” or “Promotions”. Leave only critical notifications turned on, such as security updates or synchronization status.
System advertising from the manufacturer is not a virus, but it significantly reduces the comfort of use. Disabling it is safe and does not affect the warranty of the device.
Radical measures: resetting to factory settings
If none of the above methods helped get rid of pop-up windows, and the phone continues to work unstable, the last effective option remains - a full reset to factory settings (Hard Reset). This procedure completely deletes all data from the internal memory of the device, returning it to the state in which it was when purchased.
Before performing a reset, it is critical to create a backup copy of all important data: contacts, photos, documents and correspondence. Use the service Google Drive or copy the files to your computer. Remember that after a reset, it will be impossible to recover deleted data without special, expensive expertise.
To perform a reset, go to Settings → System → Reset settings → Delete all data (factory reset). Confirm the action by entering your PIN or pattern. The process may take from 5 to 15 minutes, during which the phone will reboot several times. Do not interrupt this process and do not turn off the device.
- 📂 Backup: Save all important files to external storage before starting the procedure.
- 🔋 Battery charge: make sure that the smartphone is charged at least 50% so that it does not turn off during the reset.
- 🔐 Google Account: remember the password for your Google account, since after the reset the system will require it to confirm the owner's rights (FRP protection).
After the reset is complete, set up your phone as new. Do not immediately restore a full copy from a backup unless you are sure that it does not contain infected data. It is better to install applications manually from the official store Google Play, avoiding dubious sources. This ensures that the virus does not return with the recovered data.
What is FRP Lock?
FRP (Factory Reset Protection) is Google's security system. If you reset your phone without first logging out of your Google account, the first time you activate the device, it will require you to enter the username and password for the last account you used. This is anti-theft protection, but it can create problems if you forget your password.
Prevent future ad appearances
To prevent the problem with pop-ups from returning, you need to follow certain rules of digital hygiene. The main principle is not to install applications from unverified sources. In the settings, disable the ability to install APK files from a browser or file manager, leaving this privilege only for the official Play Market store.
Regularly update the operating system and installed applications. Developers are constantly closing security vulnerabilities through which malware can enter the device. Turn on automatic updates in your Google Play settings to ensure you don't miss important security patches.
Be careful when surfing the Internet. Avoid clicking on flashy banners that promise winnings, free gifts, or messages that “your phone is infected.” These are classic social engineering techniques that force the user to install a virus themselves or subscribe to a spam mailing.
⚠️ Attention: No anti-virus application will provide a 100% guarantee of protection if you yourself allow the installation of dubious software. Your attentiveness is the main security shield of your smartphone.
Periodically review installed applications. If you haven't used a app for more than a month, you probably don't need it. Removing unused software not only frees up space, but also reduces the attack surface for potential threats.
Install a browser with a built-in powerful ad blocker, such as Brave or Firefox with the uBlock Origin add-on. This will reduce the amount of advertising garbage that you see on the Internet and reduce the risk of accidentally clicking on a malicious banner.
Is it possible to remove system advertising on Xiaomi without root access?
Yes, it is possible. You need to manually disable the MSA (MIUI System Ads) service in Settings and also revoke advertising permissions in each system app individually. root access is not required, but the procedure takes time.
Why do advertisements appear even after deleting the application?
The application may have left behind a cache or configuration files. There is also a possibility that the virus has installed several related components. In this case, only a complete reset of settings or searching for residual files through a file manager will help.
Is it safe to use DNS filtering to block ads?
Yes, using reliable DNS servers such as AdGuard DNS or Cloudflare is completely safe. This is a standard network technology that does not disrupt the operation of applications and does not collect your personal data if you trust the DNS provider.
How to distinguish a virus from regular advertising in the browser?
If advertising appears only inside the browser when visiting sites, these are site settings. If windows pop up on the desktop, when the screen is off, or in other applications, this is most likely a virus or malicious application on the system.
What to do if the phone does not allow you to remove a suspicious application?
Most likely, the application has received device administrator rights. Go to the security settings, find the “Device Administrators” section, uncheck this application, and then try to remove it again through the applications menu.